Jenkins Hack Leads to $1M Cryptojacking

🚨 Beware of Cryptojacking! 🚨




 Are you using CICD pipeline? Recently, a US -based hacking group identified one of the misconfiguration in the Jenkins servers and based on that, they have deployed the cryptojacking -based module into the cloud servers. They have made $1 million within two weeks of that. So how did they do this? Finding that misconfigured Jenkins server is not a rocket science. You can simply go and search in a Google Docs, Nmap and Omodad. The trick followed by hackers are like, they identify publicly exposed Jenkins of any cloud based company or cloud dependent company and after that they are checking whether the anonymous logins are still enabled, if it is a CLI access is available in the sense and they will be pushed the groovy script with the base64 encoding so that the internal security mechanism would we get bypassed and this Ruby script will be getting to the Jenkins

                                                    FULL VIDEO


#Cryptojacking #cloudsecurity


Comments

Post a Comment

Popular posts from this blog

Types of Ransomware & Real Time Incidents In UAE 2024

Image
Types of Ransomware & Real Time Incidents In UAE 2024 Types of Ransomware 1. Crypto Ransomware: Encrypts files and requires payment for the decryption key. 2. Locker Ransomware: Completely restricts user access to their device. 3. Scareware: Mimics ransomware without causing any real damage to the system. 4. Doxware : Intimidates victims by threatening to disclose sensitive information unless the ransom is paid. 5. RaaS (Ransomware as a Service): Ransomware tools available for purchase on the dark web. Ransomware Incidents In 2024 UAE Countries 1. Crypto Ransomware Incident: Emirates Oil & Gas Company Breach (2024): In March 2024, a significant oil and gas corporation in the UAE fell victim to a crypto ransomware attack, allegedly executed by the Royal ransomware group. The attackers encrypted essential operational data, including project documentation and financial information, demanding a ransom of $10 million in Bitcoin. This incident caused substantial disruptions to the co...
Read more

Why your Cybersecurity team should be lifeline for Cloud Incident Response?

Image
Introduction In Today's cloud-dominated environment, businesses are experiencing a profound transformation in how they operate and store their critical data. While the cloud offers unprecedented scalability, cost-efficiency, and accessibility, it also introduces new cybersecurity challenges. As organizations increasingly migrate their operations to the cloud, the need for a robust incident response and recovery strategy cannot be overstated. The purpose of this blog is to investigate the crucial role that cybersecurity teams play in managing incidents and ensuring the resilience of cloud-based operations. Discover why your cybersecurity team is your lifeline in the cloud era. Understanding Incident Response Tiers in cloud Preventive Measures for Cloud Security Tier 1 is focused on prevention and involves implementing measures that reduce an organization’s risk profile, such as patching software or installing network firewalls. These preventive measures are designed to stop attacks ...
Read more